IN THE CLAIMS : 

Please amend claims 16, 40, 42, 44-45 as follows, cancel claim 52 and add new 
claim 53. 

1 . (Original) A method of performing authentication of a subscriber during a 
subscriber equipment terminated call, comprising the steps of 

sending a session invitation message (S4, S5) to the subscriber equipment, the 
session invitation message including authentication information (AuthDatal), and 

performing an authentication procedure in the subscriber equipment by using the 
authentication information. 

2. (Original) The method according to claim 1, further comprising the step of 
sending a response message (S6) as a response to the session invitation message 

from the subscriber equipment to the network, the response message including a result 
(AuthData2) of the authentication procedure. 

3. (Original) The method according to claim 2, further comprising the step of 
verifying (S8; S7b; S8c) the authentication procedure result (AuthData2) in a 

network control element. 

4. (Original) The method according to claim 3, further comprising the step of 



forwarding (S9) the response message of the subscriber equipment to an 
originating entity initiating the session invitation without the result of the authentication 
procedure in case of a positive verification (S8; S7b; S8c). 

5. (Original) The method according to claim 3, further comprising the step of 
forwarding a failure message to an originating entity initiating the session 

invitation in case of a negative verification (S8; S7b; S8c). 

6. (Original) The method according to claim 1, wherein in the network the SIP 
(Session Initiation Protocol) protocol is adopted as a control protocol. 

7. (Original) The method according to claim 6, wherein the session invitation 
message is a SIP INVITE request including an authentication header field. 

8. (Original) The method according to claim 6, wherein the response message is a 
SIP response message including an authorization header field. 

9. (Original) The method according to claim 3, wherein the verifying step (S8) is 
performed in a network control element which serves as an originating entity initiating 
the session invitation. 



10. (Original) The method according to claim 3, wherein the verifying step (S7a) is 
performed in a network control element which serves the subscriber equipment. 

11. (Original) The method according to claim 3, wherein the verifying step (S8c) is 
performed in an authentication center. 

12. (Original) The method according to claim 1, further comprising the step of 
sending a response message (S6a) as a response to the session invitation message 

from the subscriber equipment to the network, the response message including a result 
(AuthData2) of the authentication procedure and network authentication information 
(AuthData3) which is used by the subscriber equipment to perform an authentication of 
the network. 

13. (Original) The method according to claim 12 5 further comprising the steps of 
determining (SI 1) a network authentication result (AuthData4) in response to the 

network authentication information (AuthData4) by the network, 

sending (SI 2) the network authentication result (AuthData4) to the subscriber 
equipment, and 

verifying (S13) the network authentication result (AuthData4) in the subscriber 
equipment. 



14. (Original) The method according to claim 3, wherein the authentication procedure 
performing step and the verification step (S8; S7b; S8c) are repeated a predetermined 
number of times, wherein different authentication information (AuthDatal) are used. 

15. (Original) A network system comprising a subscriber equipment and at least one 
network control element, wherein, during a subscriber equipment terminated call, 

the network control element is adapted to send a session invitation message to the 
subscriber equipment, the session invitation message including authentication 
information (AuthDatal), and 

the subscriber equipment is adapted to perform an authentication procedure by 
using the authentication information. 

16. (Currently Amended) The network system according to claim ¥J- 15, wherein the 
subscriber equipment is adapted to send a response message as a response to the session 
invitation message to the network, the response message including a result (AuthData2) 
of the authentication procedure. 

17. (Original) The network system according to claim 16, wherein the network control 
element is adapted to verify the authentication procedure result (AuthData2). 



18. (Original) The network system according to claim 17, wherein the network control 
element is adapted to forward the response message of the subscriber equipment to an 
originating entity initiating the session invitation without the result of the authentication 
procedure in case of a positive verification. 

19. (Original) The network system according to claim 17, wherein the network 
control element is adapted to forward a failure message to an originating entity initiating 
the session invitation in case of a negative verification. 

20. (Original) The network system according to claim 15, wherein in the network the 
SIP (Session Initiation Protocol) protocol is adopted as a control protocol 

21 . (Original) The network system according to claim 20, wherein the session 
invitation message is a SIP INVITE request including an authentication header field. 

22. (Original) The network system according to claim 20, wherein the response 
message is a SIP response message including an authorization header field. 

23. (Original) The network system according to claim 17, wherein the network control 
element performing the verification is adapted to serve an originating entity initiating the 
session invitation. 
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24. (Original) The network system according to claim 17, wherein the network control 
element performing the verification is adapted to serve the subscriber equipment. 

25. (Original) The network system according to claim 17, wherein the network control 
element performing the verification is an authentication center. 

26. (Original) The network system according to claim 15, wherein the subscriber 
equipment is further adapted to send a response message as a response to the session 
invitation message from the subscriber equipment to the network, the response message 
including a result (AuthData2) of the authentication procedure and network 
authentication information (AuthData3) which is used by the subscriber equipment to 
perform an authentication of the network. 

27. (Original) The network system according to claim 26, wherein the network control 
element is further adapted to determine a network authentication result (AuthData4) in 
response to the network authentication information (AuthData4) and to send the network 
authentication result (AuthData4) to the subscriber equipment, and 

the subscriber equipment is adapted to verify the network authentication result 
(AuthData4). 



28. (Original) The network system according to claim 17, wherein the network control 
element and the subscriber equipment are adapted to repeat the authentication procedure 
and the verification for a predetermined number of times, wherein different 
authentication information (AuthDatal) are used. 

29. (Original) A network control element, wherein, during a subscriber equipment 
terminated call, the network control element is adapted 

to send a session invitation message to the subscriber equipment, the session 
invitation message including authentication information. 

30. (Original) The network control element according to claim 29, wherein the 
network control element is adapted to receive a response message as a response to the 
session invitation message from a subscriber equipment, the response message including 
a result of an authentication procedure performed by the subscriber equipment. 

3 1 . (Original) The network control element according to claim 30, wherein the 
network control element is adapted to verify the authentication procedure result. 

32. (Original) The network control element according to claim 31, wherein the 
network control element is adapted to forward the response message of the subscriber 



equipment to an originating entity initiating the session invitation without the result of the 
authentication procedure in case of a positive verification. 

33. (Original) The network control element according to claim 31, wherein the 
network control element is adapted to forward a failure message to an originating entity 
initiating the session invitation in case of a negative verification. 

34. (Original) The network control element according to claim 29, wherein in the 
network the SIP (Session Initiation Protocol) protocol is adopted as a control protocol, 

35. (Original) The network control element according to claim 34, wherein the session 
invitation message is a SIP INVITE request including an authentication header field. 

36. (Original) The network control element according to claim 34, wherein the 
response message is a SIP response message including an authorization header field. 

37. (Original) The network control element according to claim 31, wherein the 
network control element performing the verification is adapted to serve an originating 
entity initiating the session invitation. 



38. (Original) The network control element according to claim 3 1 5 wherein the 
network control element performing the verification is adapted to serve the subscriber 
equipment. 

39. (Original) The network control element according to claim 29, wherein the 
network control element is adapted determine whether it has to perform a verification of 
the authentication or not. 

40. (Currently Amended) The network control element according to claim 39, wherein 
the network control element is adapted to, in case the network control element does not 
have to perform the verification, forward a scheduled result (AuthResp) to a second 
network control element by including the scheduled result into the session invitation 
message. 

42. (Currently Amended) The network control element according to claim 40, wherein 
the network control element is adapted, in case the network control element has to 
perform the verification, 

to receive the scheduled result (AuthResp) from another network control element, 
wherein the scheduled result is included in the session invitation message, 
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to extract the scheduled result (AuthResp) from the session invitation message and 
to forward the session invitation message without the scheduled result (AuthResp) to the 
subscriber equipment, and 

to verify the authentication result (AuthData2) with a scheduled result (AuthResp). 

43. (Original) The network control element according to claim 29, wherein the 
network control element is further adapted to receive a response message from the 
subscriber equipment, the response message including a result (AuthData2) of the 
authentication procedure and network authentication information (AuthData3) which is 
used by the subscriber equipment to perform an authentication of the network. 

44. (Currently Amended) The network system control element according to claim 43, 
wherein the network control element is further adapted to determine a network 
authentication result (AuthData4) in response to the network authentication information 
(AuthData4) and to send the network authentication result (AuthData4) to the subscriber 
equipment. 

45. (Currently Amended) The network syste m control element according to claim 3 1 , 
wherein the network control element is adapted to repeat the verification for a 
predetermined number of times, wherein different authentication information 
(AuthDatal) are used. 



46. (Original) A subscriber equipment which is adapted to be connected to a network, 
and, during a subscriber equipment terminated call, 

to receive a session invitation message from the network, the session invitation 
message including authentication information, and 

to perform an authentication procedure by using the authentication information. 

47. (Original) The subscriber equipment according to claim 46, wherein the subscriber 
equipment is adapted to send a response message as a response to the session invitation 
message to the network, the response message including a result of the authentication 
procedure. 

48. (Original) The subscriber equipment according to claim 47, wherein in the 
network the SIP (Session Initiation Protocol) protocol is adopted as a control protocol. 

49. (Original) The subscriber equipment according to claim 48, wherein the session 
invitation message is a SIP INVITE request including an authentication header field. 

50. (Original) The subscriber equipment according to claim 49, wherein the response 
message is a SIP response message including an authorization header field. 
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5 1 . (Original) The subscriber equipment according to claim 46, wherein the subscriber 
equipment is further adapted to send a response message as a response to the session 
invitation message from the subscriber equipment to the network, the response message 
including a result (AuthData2) of the authentication procedure and network 
authentication information (AuthData3) which is used by the subscriber equipment to 
perform an authentication of the network. 

52. (Cancelled) 

52. (Original) The subscriber equipment according to claim 5 1, wherein the subscriber 
equipment is further adapted to received a network authentication result (AuthData4) 
from the network, and 

the subscriber equipment is adapted to verify the network authentication result 
(AuthData4). 

53. (New) The network system according to claim 46, wherein the subscriber equipment 
is adapted to repeat the authentication procedure for a predetermined number of times. 
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